2Information technology-Guidelines for the management of IT Security-Part 3:Techniques for the management of IT Secutity[S].ISO/IEC TR 13335-3:1998(E),1998.
4The Information Assurance Technical Framework (IATF),Release 3.1,NSA,September 2002.
5Security Management Infrastructure(SMI)Task 1 Team,Threat and Vulnerability Model for Information Security,1997.
6The International Organization for Standardization.Common Criteria for Information Technology Security Evaluation-Part 3:Security Assurance Requirements[S].ISO/IEC 15408-3:1999(E),1999.
7Saaty T L.The Analysis Hierarchy Process[M].New York,McGraw Hill,1980,Reprinted by RWS Publication,Pittsburgh,1996.
8The International Organization for Standardization.Information Technology-Code of Practice for Information Security Management[S],ISO/IEC 17799:2000(E),2000.
